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1. INTRODUCTION 

A Brain-Computer Interface (BCI), often called a Mind-Machine Interface (MMI), or sometimes 
called a brain—machine interface (BMI) is a direct communication pathway between the brain and an external 
device [1]. Brain-computer interface (BCI) is an emerging technology which aims to convey people's 
intentions to the outside world directly from their thoughts [2], enhancing cognitive capabilities. 
BCIs are often directed at assisting, augmenting or repairing human cognitive or sensory-motor functions. 
BCIs are used in various applications, such as wheelchair, robotic arm controllers, mental spellers and 
neuroprosthetics applications which aim at restoring damaged hearing, sight and movement [3]. 

BCT is collaboration between a brain and a device that enables signals from the brain to direct some 
external activity. By reading signals from an array of neurons and using computer chips and programs to 
translate the signals into action, BCI can enable a person suffering from paralysis to write a book or control a 
motorized wheelchair or prosthetic limb through thought alone. EEG is the signal that is used to acquire the 
signals from the brain. EEG is a record of the electric signal generated by the cooperative action of brain 
cells, or more precisely, the time course of extracellular field potentials generated by their synchronous 
action. Neurons are responsible for sending the instructions generated by brain to various parts of the body. 
These neurons will pass the instructions from one to another, during this course of action Na+ and K+ ions 
will react leading to the generation of an electric potential. During every activity such a potential is generated 
which is measured as EEG. 

Security systems involve knowledge based, object based and/or biometrics based authentication. 
They have shown to be vulnerable to several drawbacks such as simple insecure password, shoulder surfing, 
theft crime, and cancelable biometrics [15]. Cognitive biometrics or electrophysiology, where only 
modalities using biosignals (such as brain signals) are used as sources of identity information, gives a 
solution for those vulnerabilities [16] and [17]. The motivation behind exploring the feasibility of 
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electrophysiology is that biosignals cannot be casually acquired by external observers. They also can be of 
great value for disabled patients or users missing the associated physical trait [18]. This makes such signals 
difficult to synthesize and therefore improves the resistance of biometric systems to spoofing attacks. 
Besides electroencephalogram (EEG), as a biometric modality, could be used to send covert warning when 
the authorized user is under external forcing conditions, as implemented in [19]. 


2. PURPOSE/SCOPE/MOTIVATION 

The purpose of this work is to develop a biometric security system. A new idea has been proposed to 
develop this system. This system takes EEG signals recorded during a user's activity as input and 
authenticates the user. The input EEG waves are processed and a unique signature is generated. This 
signature is used for user identification. The need for robust security system is increasing day by day. The 
existing security systems such as passwords, Personal Identification Numbers (PIN), biometric systems 
which include fingerprint technology, retinal scan are becoming vulnerable to attacks. This is because, 
passwords and PINs can be guessed by brute force approach, fingerprints can be obtained when an user 
touches any physical object. However, EEG waves emerging from brain can neither be guessed nor copied. 
The cortical folds of the brain are unique to each human being just like a fingerprint or DNA [10]. Even 
though the electrodes are placed on the same position on the brain, the EEG signals for thoughts or actions 
originate from different parts of the brain leading to a unique signature of a user. This was the motivation for 
this work. The fact that thought of a person is unique can be used as a password to open a lock like a bank 
vault or other systems where high level of encryption is necessary. 


3. METHODOLOGY 
The different stages of BCI are signal acquisition, filtering, feature extraction, classification and 
external application. They are explained below. 


Signal Acquisition: Electroencephalography (EEG) signals are acquired from noninvasive headsets and 
these readings are stored in a file for further processing. Signals can be acquired from either dry electrodes or 
gel electrodes. Here in this work headset used is BESS (Brain Electrical Scan System) which is of 16 
electrodes. Brain Electrical Scan System - BESS, built over years of research, is a highly sophisticated EEG- 
ERP system that acquires processes and analyzes bioelectrical activity within the brain. This system is 
supplied with saline electrodes, which capture the electrical activity in 16 channel configuration with 2 
earlobe electrodes and 1 ground electrode as shown in Figure 1. 


Figure1. BESS saline electrodes 


This system contains features to provide the stimulus in multi-modality spectrum. It is used in field of 
research and has significant clinical application. It can be employed in sectors such as corporate, armed 
forces as well. 


Filtering: Once the signals are acquired it is necessary to filter them in order to remove the noise, external 
and internal artifacts. Mathematical and statistical methods are used to reduce the noise present in these 
signals. The digitalized EEG data must be filtered to remove noise and other artifacts using EEGLAB. After 
the removal of noise, EEG data coming from individual brain activity must be separated and the remaining 
artifacts must be removed. Running RUNICA module in EEGLAB proves that the test case is a success. The 
RUNICA module applies ICA on the selected EEG channels; this data after independent component analysis 
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must be obtained in matrix form. If the weighted matrix is obtained then the test case is a success. 


Feature extraction: Feature extraction is the process of analyzing the signals to distinguish pertinent signal 
characteristics. These features form a feature vector which is used as a unique signature. The filtered and 
processed EEG data must be transformed into frequency domain, using wavelet transformation. 
The mean signal value will be obtained after wavelet transformation. The EEG signals obtained from 
multiple channels acts as 2D data, whereas the wavelet transformation can be applied only on 1D signal. 
Thus data must be given in matrix format and 2D wavelet transformation function must be used on matrix. 
The data obtained after filtering must be processed further to obtain features and hence generate signature. 
The signature for each of the person is generated separately. 


Classification: The classification step aims at automatically estimating the class of data as represented by a 
feature vector. Classification of the data is done using machine learning algorithms. Late learners or early 
learners approach can be used to classify the data. A classification model is created only when a data element 
is being classified in late learners approach. The k-Nearest Neighbor algorithm falls into this 
category [11, 12]. 


External Application: The commands from the classification algorithm are provided to external devices. 


4. SYSTEM ARCHITECTURE 

EEG based biometric security system is decomposed into sub-systems that provide some related set 
of services. The design process based on system architecture is concerned with establishing a basic structural 
framework for a system. It involves identifying the major elements of the system and communications 
between these elements. Figure 2 shows the existing system architecture. 


1 Pr [ 
Signal Processing Filtering 


Signal Acquisition 


[Feature Extraction 
Brain Computer Interface 


Figure 2. System Architecture 


Saline electrodes along with the BESS software is used to record EEG signal transmission. The raw 
EEG data from electrodes are read using EEGLAB toolbox. These raw data, treated as signals are filtered and 
then sent for the feature extraction .The features extracted from a feature vector which is used as a unique 
signature. The final step is where the extracted data is classified in real time using the classification 
algorithms. The feedback is sent back to the user. 

Electroencephalography (EEG) signals are obtained from the electrodes in the form of sensor 
readings and stored in the file EEG.txt. Only 7 channel values are taken into consideration. Mean of each 
column of these electrode readings is taken and stored in the database. Once these mean values are stored in 
the database, the system is ready for prediction. The classification algorithms used is k-Nearest Neighbour 
algorithm. 

The user first trains the device for mentioned number of objects. Not all the values are stored in the 
database for future reference. To increase decrease the computing time of the overall system, only the mean 
value of 16 electrode values are taken into consideration and this sequence of mean values are stored as | 
tuple in the database. To ensure that a good data set is acquired, the process of training will be repeated for 
the same object multiple times with the same user as well as different users. After training the device the user 
can use the device for prediction. The Classify class is used for prediction. When the user uses the device for 
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prediction, the compare function classifies the obtained data into one of the trained objects by using the user 
specified classification algorithm. The obtained result is sent as a feedback to user through user interface. The 
user can train and predict for any object any number of times. The implemented security solution can be 
broadly represented in the form of a flowchart as shown in Figure 3. 
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Figure 3. Flowchart of the overall brain signal security solution system 


Figure 3 represents flowchart of the entire system. The system begins with protocol development for 
the collection of EEG signals using SSVEP. This is followed by using the protocol to acquire raw EEG data, 
and further this data is digitalized, and noise in EEG signals is simultaneously removed. Next step includes 
feature extraction and signature generation. The signature for each user is unique which is used in 
authenticating the user. 


5. RESULTS AND DISCUSSION 

This is an important stage of analysis where the results are analyzed for correctness and matched 
with the expected output for any anomaly. In Figure 4, raw EEG data which are acquired when the user is 
displayed with SSVEP protocol is shown. 
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Figure 4. EEG data during acquisition state Figure 5. EEG data after filtering 


The EEG signals in the form of sinusoidal waves are acquired directly from the user and are stored. 
In Figure 5, the EEG data after subjecting to filtering and ICA using MATLAB is shown. The raw EEG data 
is first subjected to filtering to remove noise and then ICA is applied which gives a weighted matrix. After 
filtering, features are extracted from the data. Figure 6 represents the feature vector values for the authentic 
user. It is seen that the features mean, standard deviation, variance, maximum, minimum, zero crossing rate 
and wavelet transformation mean differs when the values are taken before food and after food. The brain 
signals generated after food for the same protocol is different from that which are generated before food. 
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Figure 7. A graph showing true positive, true 


Figure 6. A graph showing SO anee between negative, false positive and false negative values for 
feature vector values for authentic user before and KNN algorithm 


after food 


The feature extraction is done for several other users whose EEG data were collected. It is seen that 
the features mean, standard deviation, variance, maximum, minimum, zero crossing rate and wavelet 
transformation mean differs from one user to another. It can be observed that variance of three users differs 
the most. Figure 7 depicts a graph showing true positive, true negative, false positive and false negative 
values obtained by applying kNN algorithm. 

From Figure 7, it is seen that the true positive value for KNN is 72.22%, true negative is 100%. False 
positive is 27.78% and false negative is 0%. This shows that, the percentage of times system allows wrong 
user to authenticate is 0%. However, nearly 27.78% of the times the right user also won’t be classified as 
authentic user by kNN. 

It is seen that the total accuracy of the system is 77.78%. The percentage of time system identifies 
right user correctly and denies wrong user is 77.78%. However, nearly 22.22% of the times, system fails to 
identify the user correctly. The implemented work is able to generate a unique signature for the main subject 
and authenticate his identity successfully by matching the stored signature with the signals recorded during 
testing/runtime. The match is successful regardless of external conditions such as time of the day and internal 
conditions such as anxiety, hunger etc. The system gives a negative result for the signals for the remaining 
two subjects, thus giving a true negative accuracy of 100%. 


6. CONCLUSION AND LIMITATIONS 

Over the course of the project, learning on different signal processing techniques, different feature 
extraction methodologies, different classification strategies etc., has been done. The work presents the 
techniques that can be used to obtain EEG signals and develop an end to end application by processing these 
signals. This provides methods to efficiently process EEG signals, remove artifacts without losing relevant 
information, and obtain features from these signals and classify based on objective. Multiple filtering and 
feature extraction techniques has been used to obtain an error free, noise free, large signature, which helps in 
better classification. 

The limitations of the product are not negative aspects to the work done. However, no product can 
fulfill all the needs of the user. With respect to this, the following might be the limitations of this software 
package. Some important limitations as follows: 

a. The system is designed to identify a limited number of users only. 

b. The obtained data from the device should be in EDF/ASCI format only. 

c. As the EEG waves vary with every activity of the user, training the user for data acquisition beforehand 
is necessary. 
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